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Patent Claims 



1. 



A method for distributing keys to subscribers in 



digital mobile radio networks (7) , with the keys being 
generated, and possibly being stored if required, in a 
security device (9) provided at the mobile radio network end 
and, on request by a subscriber, at least one key being 
requested from the security device (9) and being transmitted 
via the mobile radio network (7) to a mobile station (3) or a 
terminal (4) of the subscriber, 
characterized 

in that the transmitted key is allocated to that subscriber, 
and is stored in the terminal (4) and/or in a subscriber 
identity module SIM (5) in the mobile station (3) . 

2. The method as claimed in claim 1, characterized 

in that an SAT application is set up in the subscriber 
identity module SIM (5) in the mobile station (3) , and 
carries out additional end-to-end encryption of the key 
transmitted between the mobile station (3) and the security 
device (9) . 

3. The method as claimed in claim 2, characterized 

in that, in order to use the SAT application, the subscriber 
must identify himself to the subscriber identity module SIM 
(5) by entering a PIN. 

4. The method as claimed in one of claims 1 to 3, 
characterized 
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in that the transmitted key is stored in a protected memory 
area in the subscriber identity module SIM (5) . 

5. The method as claimed in one of claims 1 to 4 , 
characterized 

in that the key is transmitted via a traffic channel in the 
mobile radio network (7) . 

6. The method as claimed in one of claims 1 to 4 , 
characterized 

in that the key is transmitted in the form of a short message 
SM via a signaling channel in the mobile radio network (7) . 

7. The method as claimed in one of claims 1 to 6, 
characterized 

in that, when the key is requested, the subscriber's 
authorization is checked by evaluating a mobile subscriber 
telephone number MSISDN for the subscriber. 

8. The method as claimed in one of claims 1 to 7, 
characterized 

in that the security device (9) sends the key which is 
transmitted to the subscriber to one or more added value 
service nodes (11) . 
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